netgraph

  1. H

    Discussing BPF + IPFW + TAG for L7 Filtering on FreeBSD

    Hello Forum, I am conducting tests on a L7 filter setup using BPF, IPFW, and TAG, based on the resource: Tutorial_NETGRAPH_A4_Slides.pdf. I am particularly interested in the section "BPF + IPFW + TAG = L7 Filter". During experiments on my FreeBSD system, I encountered an issue where packets do...
  2. D

    Solved IP traffic from host to netgraph VM invalid

    I created a ng_bridge with link0 and link1 connected to my physical devices lower and upper. I then created a bhyve VM with a netgraph virtio-net device that is connected to link2. Here is `ngctl dot` to help visualize it: Here is ngctl commands I issued: msg re0: setpromisc 1 msg re0...
  3. spmzt

    Solved Weird Netgraph Behavior With Jail VNET

    Hi, I'm currently dealing with an intriguing situation that involves the Netgraph and its interaction within a FreeBSD Jail configured with VNET. Background: I have loaded the ng_ether module on the host machine. Additionally, I have set up multiple FreeBSD Jails with VNET and they are...
  4. U

    Netgraph/Netflow Export to Andrisoft Wanguard

    Hello, I am setting up a FreeBSD server to act as a router/firewall for an ISP that is experiencing a DDoS attack. All services are up and running smoothly, but now I need to configure a flow packet exporter for an attack detector to monitor link turnovers and take real-time protection...
  5. A

    Solved netgraph vnet jail not getting ip address via DHCP

    Any netgraph gurus out there? I created two vnet jails with the help of the devin teske's jng scipts and example jail.conf under /usr/share/examples/jails/. I can enter either jail using jexec However, I cannot ping any targets from inside the jails. The jails do not appear to have ip...
  6. epopen

    MTU of jail vimage by netgraph

    Hi All I have a question about MTU of jail vimage by netgraph. Please reference illustration of running system as follows. Running routing mode with gateway_enable="YES" @ /etc/rc.conf. Connect Jail of ssh from netif msk0(internet) via ssh. Log in is OK, but disconnect unexpected when high...
  7. B

    netgraph ng_bridge: can't ge an IP using DHCP when creating a vlan

    I am using a bridge `bridge0` that will contain a native nic interface ixl3 and add a tap interface in it: ifconfig bridge0 create ifconfig bridge0 addm ixl3 addm tap0 ifconfig bridge0 bridge0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500 ether 58:9c:fc:10:e7:20...
  8. PKraszewski

    Shell ngctl msg node: setopt ... bails with error

    Hello! I'm struggling with ngctl to enable SO_REUSEPORT on ksocket(inet/dgram/udp). Node ID as absolutely correct, I can both bind and connect - but I can't setopt. # node: is of type ksocket inet/dgram/udp # Works ngctl msg node: bind inet/127.0.0.1:5000 # Works ngctl msg node: connect...
  9. PKraszewski

    Usage of M_PREPEND() function in netgraph processing

    Hello! I'm in the process of writing a netgraph node specific to my project, sitting between ethernet node on the left and bunch of udp/sctp nodes on the right (sorta really crippled L2 VPN without encryption). It has "local" and set of peer0..peer15 hooks. The job of the node with flow...
  10. epopen

    Wish to migrate exist ordinary jail to VIMAGE infrastructure

    Hi All. My server upgrade to 12.0-Release and found news about VIMAGE into GENERAL config, meant VIMAGE ready for product environment. So I wish to migrate exist ordinary jail to VIMAGE infrastructure too :). But procedure stopped at default gateway. Current ordinary jail environment detail...
  11. F

    Solved Jails with IP from DHCP?

    Afternoon all, On my home network I have three VirtualBox VMs that I would like to condense into a single VM, this single VM would have three jails each running a service. Currently each VM has a VirtualBox bridged adaptor, on my router I see each VM having its own MAC address, and the router...
Back
Top